Files
kubespray/tests
Matthew Mosesohn d487b2f927 Security best practice fixes (#1783)
* Disable basic and token auth by default

* Add recommended security params

* allow basic auth to fail in tests

* Enable TLS authentication for kubelet
2017-10-15 20:41:17 +01:00
..
2017-10-05 16:52:28 +01:00
2016-12-14 13:42:19 +01:00
2017-10-05 16:52:28 +01:00
2016-02-10 22:58:57 +01:00
2016-02-10 22:58:57 +01:00

Kubespray cloud deployment tests

Amazon Web Service

          | Calico        | Flannel       | Weave         |

------------- | ------------- | ------------- | ------------- | Debian Jessie | Build Status | Build Status | Build Status | Ubuntu Trusty |Build Status|Build Status|Build Status| RHEL 7.2 |Build Status|Build Status|Build Status| CentOS 7 |Build Status|Build Status|Build Status|

Test environment variables

Common

Variable Description Required Default
TEST_ID A unique execution ID for this test Yes
KUBE_NETWORK_PLUGIN The network plugin (calico or flannel) Yes
PRIVATE_KEY_FILE The path to the SSH private key file No

AWS Tests

Variable Description Required Default
AWS_ACCESS_KEY The Amazon Access Key ID Yes
AWS_SECRET_KEY The Amazon Secret Access Key Yes
AWS_AMI_ID The AMI ID to deploy Yes
AWS_KEY_PAIR_NAME The name of the EC2 key pair to use Yes
AWS_SECURITY_GROUP The EC2 Security Group to use No default
AWS_REGION The EC2 region No eu-central-1

Use private ssh key

Key
openssl pkcs12 -in gce-secure.p12 -passin pass:notasecret -nodes -nocerts | openssl rsa -out gce-secure.pem
cat gce-secure.pem |base64 -w0 > GCE_PEM_FILE`